David Osipov
7dc3c3666d
Merge upstream/main into test/main-into-flow-sec
2026-03-20 14:20:20 +04:00
Alexey
ef9b7b1492
Teardown Monitoring in API
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-20 12:45:53 +03:00
Alexey
f61d25ebe0
Authoritative Teardown + Orphan Watchdog + Force-Close Safery Policy
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-20 12:11:47 +03:00
Alexey
ed4d1167dd
ME Writers Advanced Cleanup
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-20 12:09:23 +03:00
Alexey
1c6c73beda
ME Writers Anti-stuck and Quarantine fixes
...
Co-Authored-By: Nook Scheel <nook@live.ru >
2026-03-20 00:41:40 +03:00
David Osipov
754e4db8a9
Add security tests for pool writer and pool refill functionality
2026-03-20 00:07:41 +04:00
David Osipov
7416829e89
Merge remote-tracking branch 'upstream/main' into test/main-into-flow-sec
...
# Conflicts:
# Cargo.toml
# src/api/model.rs
# src/api/runtime_stats.rs
# src/transport/middle_proxy/health.rs
# src/transport/middle_proxy/health_regression_tests.rs
# src/transport/middle_proxy/pool_status.rs
2026-03-19 23:48:40 +04:00
David Osipov
c07b600acb
Integration hardening: reconcile main+flow-sec API drift and restore green suite
2026-03-19 20:24:44 +04:00
David Osipov
7b44496706
Integration test merge: upstream/main into flow-sec security branch (prefer flow-sec on conflicts)
2026-03-19 19:42:04 +04:00
Alexey
8d1faece60
Instadrain + Hard-remove for long draining-state
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-19 17:45:17 +03:00
Alexey
dd8ef4d996
Merge branch 'main' into feat/shadowsocks-upstream
2026-03-19 17:19:01 +03:00
Alexey
f655924323
Update health.rs
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-19 16:15:00 +03:00
Alexey
3279f6d46a
Cleanup-path as non-blocking
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-19 14:07:20 +03:00
Alexey
6f9aef7bb4
ME Writer stuck-up in draining-state fixes
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-19 13:08:35 +03:00
Alexey
89e5668c7e
Runtime guardrails
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-18 22:33:41 +03:00
David Osipov
20e205189c
Enhance TLS Emulator with ALPN Support and Add Adversarial Tests
...
- Modified `build_emulated_server_hello` to accept ALPN (Application-Layer Protocol Negotiation) as an optional parameter, allowing for the embedding of ALPN markers in the application data payload.
- Implemented logic to handle oversized ALPN values and ensure they do not interfere with the application data payload.
- Added new security tests in `emulator_security_tests.rs` to validate the behavior of the ALPN embedding, including scenarios for oversized ALPN and preference for certificate payloads over ALPN markers.
- Introduced `send_adversarial_tests.rs` to cover edge cases and potential issues in the middle proxy's send functionality, ensuring robustness against various failure modes.
- Updated `middle_proxy` module to include new test modules and ensure proper handling of writer commands during data transmission.
2026-03-18 17:04:50 +04:00
Maxim Myalin
062464175e
Merge branch 'main' into feat/shadowsocks-upstream
2026-03-18 12:38:23 +03:00
Maxim Myalin
def42f0baa
Add Shadowsocks upstream support
2026-03-18 12:36:44 +03:00
Alexey
2aa7ea5137
ME Coverage Ratio in API + as Draining Factor
2026-03-18 11:46:13 +03:00
Alexey
3739f38440
Adaptive Buffers + Session Eviction Method
2026-03-18 10:49:02 +03:00
David Osipov
f0c37f233e
Refactor health management: implement remove_writer_if_empty method for cleaner writer removal logic and update related functions to enhance efficiency in handling closed writers.
2026-03-17 21:38:15 +04:00
David Osipov
60953bcc2c
Refactor user connection limit checks and enhance health monitoring tests: update warning messages, add new tests for draining writers, and improve state management
2026-03-17 20:53:37 +04:00
David Osipov
0284b9f9e3
Refactor health integration tests to use wait_for_pool_empty for improved readability and timeout handling
2026-03-17 20:14:07 +04:00
David Osipov
50a827e7fd
Merge upstream/flow-sec into pr-sec-1
2026-03-17 19:48:53 +04:00
David Osipov
4808a30185
Merge upstream/main into flow-sec rehearsal: resolve config and middle-proxy health conflicts
2026-03-17 18:35:54 +04:00
David Osipov
c9271d9083
Add health monitoring tests for draining writers
...
- Introduced adversarial tests to validate the behavior of the health monitoring system under various conditions, including the management of draining writers.
- Implemented integration tests to ensure the health monitor correctly handles expired and empty draining writers.
- Added regression tests to verify the functionality of the draining writers' cleanup process, ensuring it adheres to the defined thresholds and budgets.
- Updated the module structure to include the new test files for better organization and maintainability.
2026-03-17 17:11:51 +04:00
Alexey
2e8be87ccf
ME Writer Draining-state fixes
2026-03-17 13:58:01 +03:00
Alexey
58f26ba8a7
Configurable ME draining writer overflow threshold
2026-03-15 12:13:46 +03:00
Alexey
ac0698b772
ME Writer Rebinding - Lifecycle and Consistency fixes
2026-03-15 00:17:54 +03:00
Alexey
780fafa604
Src-IP in ME Routing + more strict bind_addresses
2026-03-14 02:20:51 +03:00
Alexey
a15f74a6f9
Configured middle_proxy_nat_ip for ME Gate on strartup
2026-03-13 16:52:24 +03:00
David Osipov
8b5cbb7b4b
Add Rust coding conventions and self-explanatory commenting guidelines; update dependencies and version in Cargo files; enhance OpenBSD support in installation and documentation; improve TCP socket configuration and testing
2026-03-11 20:49:51 +04:00
Alexey
be24b47300
Per-upstream Runtime Selftest
2026-03-10 01:25:28 +03:00
Alexey
b950987229
ME Selftest
2026-03-09 20:35:31 +03:00
Alexey
ef2ed3daa0
ME/DC Reroute + ME Upper-limit tuning
2026-03-09 00:53:47 +03:00
Alexey
633af93b19
DC to Client fine tuning
2026-03-08 04:51:46 +03:00
Alexey
9401c46727
ME Writer Pick
2026-03-08 03:05:47 +03:00
Alexey
6b3697ee87
ME Active-by-Endpoint
2026-03-08 03:04:27 +03:00
Alexey
c08160600e
Update pool_writer.rs
2026-03-08 03:03:41 +03:00
Alexey
cd5c60ce1e
Update reader.rs
2026-03-08 03:03:35 +03:00
Alexey
d2baa8e721
CPU/RAM improvements + removing hot-path obstacles
2026-03-07 19:33:48 +03:00
Alexey
5f77f83b48
ME Adaptive Floor Upper-Limit
2026-03-07 17:27:56 +03:00
Alexey
258191ab87
Routed DC + Strict ME Writers
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-07 13:40:57 +03:00
Alexey
27e6dec018
ME Strict Writers
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-07 13:32:02 +03:00
Alexey
93f58524d1
No busy-poll in ME
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-07 03:25:26 +03:00
Alexey
0ff2e95e49
Event-driven Drafts
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-07 03:22:01 +03:00
Alexey
ce9698d39b
ME Adaptive Floor Planner
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-07 02:50:11 +03:00
Alexey
02fe89f7d0
DC Endpoints on default
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-06 20:00:32 +03:00
Alexey
24df865503
Session by Target-DC-ID
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-06 19:59:23 +03:00
Alexey
e9f8c79498
ME Pool w/ Strict-Index
2026-03-06 19:58:57 +03:00